Thursday, March 27, 2008

6-19. Predefined Roles

There are some predefined roles such as:

  • CONNECT
  • RESOURCE
  • SCHEDULER_ADMIN
  • DBA
  • SELECT_CATALOG_ROLE

Notes:

  • CONNECT is granted automatically to any user created with Enterprise Manager
  • In earlier versions of the database (before 10gR2), the CONNECT role included more privileges, such as CREATE TABLE and CREATE DATABASE LINK, which have been removed for security reasons.
  • Granting the RESOURCE ROLE includes granting the UNLIMITED TABLESPACE privilege

Functional Roles

Other roles that authorize you to administer special functions are created when that functionality is installed. For example:

  • XDBADMIN: contains the privileges required to administer XML database if that feature is installed.
  • AQ_ADMINISTRATOR_ROLE: privileges to administer advanced queuing
  • HS_ADMIN_ROLE: includes the privileges needed to administer heterogeneous services.

No comments: